Who we are
ZipHub is a web development studio that builds corporate websites, landing pages and custom web systems. We are the controller of the personal data described in this policy, meaning we decide how and why it is processed.
Trade name: ZipHub
Legal name: 65.316.052 KEVIN ALMEIDA FERREIRA
CNPJ (Brazilian company registration): 65.316.052/0001-17
Legal form: Individual Microentrepreneur (MEI)
City: Feira de Santana, Bahia, Brazil
Data Protection Officer (DPO): Kevin Almeida Ferreira
Privacy contact: comercial@ziphub.io
Support and general questions: contato@ziphub.io
Website: ziphub.io
What data we collect
We only collect what we need to serve you. The data depends on the channel you use.
Profile name and phone number.
Content of the messages, files and voice notes you send.
Project or support ticket information: project type, goal, deadline, budget range, reference links, company name and email.
Email address, name and content of the messages sent to comercial@ziphub.io (quotes, proposals and privacy) or contato@ziphub.io (support and questions).
Website
Quote request form (briefing): name, email, phone, company name, team size, current website (optional), project type, budget range, deadline and project details (optional). This data is sent by email to our team. The website does not store the form in a database.
Technical access data: IP address, browser and device type, page visited, date and time. These records are generated by the server and by Cloudflare to keep the website running and protected.
Approximate country: based on your IP and browser language, the website picks the language and currency shown. This information is used on the spot and is not stored by the website.
Strictly necessary cookies, described in the cookies section.
The website does not use analytics tools, advertising pixels, tracking tags, third-party chat, or embedded videos or maps. Fonts are served by the website itself, with no calls to external services.
Clients with a contract
Data needed for the proposal, contract, invoice and billing: name or legal name, CPF or CNPJ (Brazilian tax IDs) or the equivalent tax ID in your country, billing address, contact email and phone.
How we use the data
Each use relies on a legal basis set out in article 7 of the LGPD:
| Purpose | Legal basis (LGPD) |
|---|---|
| Replying to contacts and answering questions | Pre-contractual steps (art. 7, V) and legitimate interest (art. 7, IX) |
| Preparing quotes and proposals | Pre-contractual steps (art. 7, V) |
| Providing support and delivering the contracted project | Performance of a contract (art. 7, V) |
| Issuing invoices and billing | Compliance with a legal obligation (art. 7, II) and performance of a contract (art. 7, V) |
| Keeping website access logs and meeting legal obligations | Compliance with a legal obligation (art. 7, II) |
| Protecting the website against attacks, bots and abuse | Legitimate interest (art. 7, IX) |
| Defending our rights in legal proceedings | Regular exercise of rights (art. 7, VI) |
| Sending communications that are not about your contact or project | Consent (art. 7, I), which you can withdraw at any time |
Automated service on WhatsApp
The first reply on WhatsApp may come from an automated assistant. It asks questions to gather the information for your quote or support ticket and hands everything over to a person on our team.
You can ask to talk to a human at any time. Just say so in the chat.
The assistant does not make decisions about you. Quotes, proposals and any decision about the project are made by the ZipHub team.
Conversations are not used to train third-party artificial intelligence models.
International transfers
Some processors, such as Meta, Cloudflare and Google, process data outside Brazil, for example in the United States. These transfers follow the safeguards set out in article 33 of the LGPD, such as standard contractual clauses and data protection commitments made by these providers.
How long we keep data
Conversations and quote briefings that did not become a project: up to 12 months after the last contact.
Data of clients with a contract: for the term of the contract plus 5 years, for tax obligations and to defend ourselves in possible legal proceedings.
Website access logs: 6 months, as required by the Brazilian Internet Civil Framework (Law 12.965/2014, art. 15).
After these periods, the data is deleted or anonymized.
Your rights
Under article 18 of the LGPD, you can ask at any time for:
Confirmation that we process your data.
Access to the data.
Correction of incomplete, inaccurate or outdated data.
Anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the LGPD.
Portability of the data to another provider.
Deletion of data processed based on your consent.
Information about who we share your data with.
Information about the option of not giving consent and what that implies.
Withdrawal of consent.
Objection to processing carried out without consent, if it breaches the LGPD.
To exercise any right, write to comercial@ziphub.io. We may ask you to confirm your identity first. We reply within 15 days. If you are not satisfied, you can also file a complaint with the Brazilian National Data Protection Authority (ANPD).
Visitors and clients in the United Kingdom and the European Union
If you are in the United Kingdom or the European Union, you also have the rights provided by the GDPR and the UK GDPR: access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent. The equivalent legal bases are performance of a contract, legal obligation, legitimate interests and consent. Requests go through the same channel, and you can complain to the data protection authority in your country, such as the ICO in the United Kingdom or the AEPD in Spain.
Data deletion
To request the deletion of your data, choose one of the options:
Send an email to comercial@ziphub.io with the subject "Data deletion", stating the WhatsApp number or email you used to contact us.
Or send the message "DELETE MY DATA" (or "EXCLUIR MEUS DADOS") to ZipHub on WhatsApp (+55 75 98368-7417).
You will receive confirmation of the deletion within 15 days.
We delete the data from our customer service tools, email and automations. Copies of conversations stored on your own device and data processed by Meta follow WhatsApp rules.
Exception: data we must keep due to legal or tax obligations, such as invoices and access logs, is kept for the required period. In that case, we tell you which data was kept and why.
Cookies
The website uses only strictly necessary cookies to work and stay protected. We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent.
| Cookie | Service | Purpose | Duration |
|---|---|---|---|
| NEXT_LOCALE | ZipHub | Remember the chosen language | Session (deleted when the browser closes) |
| __cf_bm | Cloudflare | Identify automated traffic and protect the website against bots | 30 minutes |
| cf_clearance | Cloudflare | Record that the browser passed a security check, when one is shown | Up to 30 minutes |
The internal admin area uses a login cookie for the ZipHub team only. Visitors do not receive this cookie.
How to disable them: you can block or delete cookies in your browser settings. If you do, the website may not remember your language and the Cloudflare security check may appear more often.
Security
Encrypted connection (HTTPS) across the whole website.
Cloudflare protection against denial of service (DDoS) attacks and bots.
Access to data restricted to the people who need it to serve you.
Servers with access control and credentials kept outside the code.
Login and password authentication on internal tools.
If a security incident may cause relevant risk or harm, we will notify you and the ANPD, as required by article 48 of the LGPD.
Children and teenagers
Our services are intended for businesses and people over 18. We do not knowingly collect data from children or teenagers. If we find out that this has happened, we delete the data.
Changes to this policy
We may update this policy when our services or the law change. The date at the top and at the end of the page always shows the version in force. Relevant changes are announced on the website and, for clients with an active contract, also by email or WhatsApp.
Last updated date
This policy was last updated on October 18, 2026.